Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

3
  • One practical issue with client side hashing is that javascript's performance isn't great, and mobile devices don't ave the greatest CPU either. Commented Sep 27, 2013 at 9:09
  • UPDATE: let's assume Javascript is always enabled in browser, and that I am using SSL/TLS to transport data between the browser and the server Commented Sep 27, 2013 at 9:54
  • Step 2 might allow an attacker to find existing usernames. Commented May 10, 2019 at 8:57